<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>Title</title>
</head>
<section></section>
<div id="div"></div>
<body>
<script>
    let a = "<img src=x onerror=\"alert(document.cookie)\">";
    // div.innerHTML = a;
    // div.outerHTML = a;
    // document.write(a);
    location.href = alert('hello');
</script>
</body>
</html>
